Nyein Chan Aung

icon location Low Level ( Pentester,Hacker,Bug Bounty Hunter )

Results 1 comments of Nyein Chan Aung

BUG: Host header injection & insecure password-reset link (magic link uses untrusted `req.headers.host` + `http`) leading to account takeover

Hello team,Will you assign this to CVE.